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Abstract 

We suggest a purely combinatorial approach to a general prob- 
lem in system reliability. We show how to determine if a given vector 
can be the signature of a system, and in the affirmative case exhibit 
such a system in terms on its structure function. The method em- 
ploys results from the theory of simplicial sets, and provides a full 
characterization of signature vectors. 

1 Introduction 

The concept of signature of a system turns out to be very useful, 
as it provides knowledge of the lifetime of a system in terms of its 
structure function and single components' lifetime only. We refer to 
[3] for a thorough introduction on the subject. In this paper, we 
give a full characterization of signature vectors. This is performed 
by providing a criterion to check whether a probability vector can 
be a signature. The method consists in numerical tests, and if the 
tests are positive it constructs explicitly the structure function a 
system with the given signature. If a vector does not fulfill a certain 
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technical requirement, the algorithm produces a family which does 
not have the necessary algebraic properties so that no system can 
have the candidate vector as its signature. 

The article is organized as follows. In Section [2] we provide the 
main definitions and notions in the theory of system signatures. In 
Section [3] we recall the statement of the Kruskal-Katona theorem for 
simplicial complexes and present the main result, i.e. the algorithm 
that tests a vector to check whether it can be the signature of some 
system. The idea is based on the observation that a special family of 
sets of system components, which fully determines the system, has 
the same properties that are assumed in the Kruskal-Katona theorem 
as to give place to a simplicial set. Then we simply import known 
theories and techniques from simplicial complexes into our context. 
We conclude with some comments in Section[4] where we also antici- 
pate our next efforts, part of them appearing in a forthcoming paper 
([I]). Few introductory lines about simplicial complexes are listed in 
the final appendix, to make the article self-contained. 

2 Basic notions 

In this section we recall some standard concepts and definitions from 
the theory of system reliability (see [4] for more details). 

Let X = {Xi, . . . , X n } be a set of n £ N continuous time binary 
stochastic processes, interpreted as the state of the components of a 
system, each component i being either down (or broken/off) or up 
(or working/on), e.g. Xi = 0, 1 respectively, i = 1, . . . , n. We assume 
that all components are initially up and when a component fails, it 
stays down forever. A system deploys the components according to 
some design architecture and is characterized by a structure function 
<j> that indicates whether the whole system is up or down, for any 
given description of the states of individual components. In other 
words, the system may work even if some components are broken, 
and given a subset G C X, interpreted as the set of working compo- 
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nents, the function 

4> : 2 X -»• {0, 1} 

tells us if the system is up (0(G) = 1) or down (4>(G) = 0). Common 
sense requires (f> to be non-decreasing, which means ACB implies 
4>(A) — 4>{B)- We assume that the random lifetimes of the com- 
ponents are continuous, in order to avoid ties in the failures, and 
exchangeable. At the beginning all components (hence the whole 
system) work, and then one at a time they fail (and stay broken), so 
that at some point the system stops working, say on the i-th failure. 
The order in which components fail is a permutation a : N — > N of 
the set {l,...,n}, and this means that 0({X CT (j), . . . , X a r n \}) = 1 
but 0({X CT ( i+1 ), . . . , X CT ( n )}) = 0. We may rephrase this by say- 
ing that (for a given system <j>) one and only one breakdown index 
i G {l,...,n} is associated with a given ordering of the failures 
(permutation) a. Let Ni((j>) be the number of permutations with 
breakdown index i, i.e. such that 4>({X a ^, . . . , X CT („)}) = 1 but 
<f>({X a(i+1) ,...,X a(n) }) = 0. Define N(<f>) = (N^), . . . , N n (<f>)) G 
N". 

Definition 1 The system signature is the probability vector s(<j>) = 
N(4>)/n\, whose i-th entry Si(<p) is the probability that the system 
stops working exactly as the i-th failure of a component takes place. 

Let us introduce some standard terminology. 

Definition 2 A subset C C X is called a cut set if the system is 
down when all the components in C are broken. A subset P C X 
is called a path set if the system is up whenever all the components 
in P work. A set of either type is said to be minimal if none of its 
proper subsets enjoy the same property. 

It is not difficult to see that the structure function is fully determined 
by the family of minimal cut sets or equivalently by the family of 
minimal path sets. The system is thus completely defined by its 
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structure function or by its family of minimal cut or path sets. Min- 
imality is the same as requiring that there are no proper inclusions 
between elements of the family. This one to one correspondence 
that maps non decreasing functions 2 X — > {0, 1} equal to zero at the 
empty set and equal to one at X to subsets of 2 X without proper 
inclusions will be denoted by Q, and allows the following notation. 

Definition 3 Given a structure function <j>, the corresponding fam- 
ily of minimal cut sets is denoted by £l(4>). Similarly, for each family 
Q of subsets of X without proper inclusions, there exists a unique 
structure function 4>o. whose family of minimal cut sets is Cl. 

Clearly, fa = Q-^fl). 

The next definition ([4]) is very convenient to capture the relation 
between (minimal) cut and path sets in a system, by introducing 
some sort of mirror system. 

Definition 4 Given a system with structure function <f>, for all A C 
X the dual system has structure function <j>* 

4>*{A) = l-cf>{X\A) . 

The map tf> !->• (jf defines an involution in the set of structure func- 
tions on X. Some well known remarks are in order. If B' C X is a 
minimal cut set and B C B' , then X \ B is a path set; conversely 
if G' C X is a minimal path set and G C G', then X \ G is a cut 
set. Dual systems enjoy a remarkable property: a minimal cut set 
for a system is a minimal path set for its dual system, and vice versa, 
since duality is an involution. This correspondence can be seen as 
a sort of time reversal, i.e. is yielded by reading the components of 
the signature vector in reverse order. In fact, the signatures of two 
dual systems are related by 

Si(<j>) = S„_ 1+ l(0*) (1) 

for all i = 1, . . . , n. Hence a vector can be a signature if and only if 
the same vector read in reverse order is also a signature. 
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3 Characterization of system signatures 



In this section we present the main results of our study. 

Let us start with a few preliminary observations. Consider an 
ordering a of components' failures in the event that the systems fails 
as the i-th failure of a component takes place. This means that the 
set of the i — 1 components that failed first does not contain a cut 
set, and that the remaining n — i + 1 components include a path set 
(the system is still working at the time of the i — 1-th failure) and 
therefore a minimal path set as well. We also know that the set of the 
i components that failed first does contain a cut set (and therefore 
a minimal cut set either), and the remaining n — i components do 
not include any path set. The component that gave place to the 
i-th failure belongs to both a minimal cut set and a minimal path 
set. Since a indicate the order in which the components failed, the 
component X CT (j) is the common element to the minimal cut and 
path sets that appear in the first i and last n — i + 1 positions of the 
vector (X^n), . . . , X ff („j) respectively. This is a general fact. 

Remark 1 Each minimal cut set intersects all minimal path sets, 
and the intersection consists of exactly one element. Conversely, 
each minimal path set intersects all minimal cut sets, and the inter- 
section has cardinality one. 

The equivalence of structure functions and families of minimal cut 
or path sets extends the duality introduced for structure functions to 
families of minimal cut and path sets. Given a family H of subsets of 
X without proper inclusions, thanks to Definition [3l we may define 
its dual family by 

n* = fi(^) 

regardless of whether it is interpreted as family of cut or path set. 
The family of minimal cut sets of a system is also the family of the 
minimal path sets of the dual system (and vice versa, because duality 
is an involution). Duality is in essence the relation between minimal 
cut sets and minimal path sets, which ultimately consists of a time 
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reversal because of JTJ). Translated in terms of structure functions 
this means 

<fe* = 4>h ■ 

We may use this identity to provide descriptions of dual fam- 
ilies of minimal cut or path sets: let us do so in a fundamental 
example first. If for some positive integer I < n we choose fij — 
{{1},{2},...,{7}}, then Of = {{1,2,...,;}}. This is the special 
case of series-parallel duality. Now let cf>i = (f>n l . Using for simplicity 
the unnormalized signature N(cj>) — n\s(<j)), it is easy to figure that 

Ni{<t>i) = (n - QUI ( "J * J , i < n - I + 1 



Ni(4>t) = (n-l)m[) ]} ,i>l 



and 

NJrh?} — In - I 

1 ~ 1 

Let us list some explicit examples for n = 5: 

N{<jn) = (24,24,24,24,24) 

N(<h) = (48,36,24,12,0) 

N(<t> 3 ) = (72,36,12,0,0) 

7V(0 4 ) = (96,24,0,0,0) 

N(<t>a) = (120,0,0,0,0). 

The corresponding duals are simply the same vectors with compo- 
nents in reverse order because of {T}. The families of type Qi and 
fi* are very convenient: not only do they allow for simple calcu- 
lations of their signatures, but they make the signature of every 
system expressible as a Z-linear affine combination of their signa- 
tures. This is done using a standard inclusion-exclusion procedure, 
and even though it may be difficult to perform explicit computa- 
tions, we obtain at least a representation theorem. For example, if 
fi = {{1,2}, {1,3}}, then 

N(<Pn) = W(0{{1,2}}) + A^{{1,3}}) ~ iV(0{{!,2,3}}) • 
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This is because the event "the first i failures involve components 1 
and 2" is the disjoint union of the events "the first i failures involve 
components 1 and 2 but not 3" and "the first i failures involve com- 
ponents 1 and 2 and also 3" . This last event is accounted for even in 
the event "the first i failures involve components 1 and 3" . In other 
words, {1, 2, 3} is a superset of both {1, 2} and {1, 3} and is counted 
twice, so it has to be subtracted once. 

Since the system is exchangeable, <j){{i,2}} an< i 4>{{i,3}} describe 
two equivalent systems, i.e. with same signature. Moreover, {{1, 2}} = 
Q2, {{1,2,3}} = and n * = 4>* nr Therefore 

N(d>n) = 2N(J>* 2 ) - N(d>*s) 

= 2(0, 12, 24, 36, 48) - (0, 0, 12, 36, 72) 

= (0,24,36,36,24) 

,(<M = |(0>24,36,36,24)=(o AA) 

The general statement at this point follows quite naturally from the 
inclusion-exclusion principle, and it reads as follows. 

Theorem 1 Let Q. be a family of subsets of X without proper inclu- 
sions, interpreted as the family of cut sets of an induced system with 
structure function 4>n- Then the signature of the system is 

^fi) = ^£(-l)' r| *W>|ur|) 
' rcn 

where \ ■ \ denotes the cardinality and LIT is the union of all the sets 
in r. 

We are now ready to describe an algorithm that produces a struc- 
ture function inducing a given signature, thus providing a test to 
verify whether a vector arises as the signature of a system, and a 
complete characterization of system signatures. We start by intro- 
ducing the Kruskal-Katona theorem. Given two positive integers n 
and Z, it is known that there is a unique way to expand n as a sum 
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of binomial coefficients as 



with ni > 7i;_i > • • • > Uj > j > 1. Now for the given n and £ define 

» + m-(.;.j+(v)+-+(A 

and 



from the previous expansion. For the readers familiar with simplicial 
sets, these are the actions of the face and degeneracy maps. The next 
statement is a version of the theorem of Kruskal-Katona and offers 
a minimality constraint for simplicial complexes, with emphasis on 
the algebraic aspect of the sets composing the complex. 

Proposition 1 (Kruskal-Katona) Let X_ be a set of n elements, 
k and I be given integers such that 

n > 1 , 1<1 <n , l<k< 

and let 

A = {A 1; ...,A k } , AiCX, \Ai\ =1 , i= l,...,k . 
Let also 

A~ = {B : \B\ = I - 1 , 3 j : B c A 5 } . 

Then 

min |.4~| = n~(l) , 
A 

where the minimum runs over all the families A of k subsets of X_ 
of cardinality I and n~ (I) is defined as in 

For the original proof and a more general analysis, see [2]. The 
next statement is probably the most common version of the Kruskal- 
Katona theorem, and provides a necessary and sufficient condition 
on the number of Z-simplices for them to form a complex. These 
numbers are the entries of the so called /-vector of the complex, 
whose definition is recalled in Appendix [Al 
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Proposition 2 (Kruskal-Katona) A vector (fo, fl, ■ ■ ■ , fd) is the 

f -vector of a simplicial d-complex if and only if 

0</f(J)</j-i , l<l<d. (4) 

Moreover, these two equivalent statements are equivalent to a third: 
the subset Af of the power set 2 N consistinq of the empty set together 
with the first (accordinq to the reverse lexicoqraphic order) sub- 
sets of N of cardinality I, for I — 1, ... ,d, is a simplicial complex. 

In our case d = n — 1, and any total ordering can be chosen for 
the system components. Choosing initial segments (according to the 
reverse lexicographic order) of size /; at level I makes the number of 
elements al level / — 1 minimal. There is a dual maximality condition 
which is equivalent to (Q 

0<fi<ff-i(l) , l<l<d, 

where /jt^fJ) is defined as in {2}. For the original proofs and a 
more general analysis, see [2J [3]. The reverse lexicographic order 
simply reads backwards the strings, then sorts lexicographically. The 
advantage of considering the reverse lexicographic order is that the 
list of the first (according to this order) r £ N elements does not 
depend on the size of the alphabet (the size n of the system, in our 
case) . 

Let us see how this applies in the context of system signatures. 
The algorithm that we are about to present is the translation of the 
proof of the Kruskal-Katona theorem where the role of /-vectors is 
played by the "complement" of the cumulative signature times the 
number of permutations of components, roughly speaking. 

Theorem 2 Let s £ Q n be the candidate siqnature. Assume it is a 
probability vector. For I = 1, . . . , n, define fi = (?) (s;+i + ■ ■ ■ + s n ). 
Then s is the siqnature of a system if and only if 

0</,+i(0</i ,1<1<"-1, (5) 
where ff(l) is defined as in 0). 
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Proof. Let Q be the family of cut sets of a system with structure 
function cf>, and consider C = 2 X \Q. Then C = </>* _1 (0) is a simplicial 
complex. Similarly, using path sets instead of cut sets, V = <^ _1 (0) 
is also a simplicial complex. (We will focus on cut sets only, but 
nothing changes if we consider path sets). In fact, it is obvious that 
a superset of a cut or path set is still a cut or path set respectively. 
Denote by C; and fi; the set of elements of C and Cl respectively of 
cardinality I, so that C = U;d and Q = U;f2;. Clearly C; U £li — fy] 
and |Cj I + I fij| = ("). If A G d and x £ A, then A \ x e d-i- 
Therefore the vector (|&|, . . . , |C n |) is the /-vector of the simplicial 
complex C. Knowing this vector means knowing the family of cut 
sets too, since f2; = rf) \ C\. But the vector (|f2i|, . . . , |f2 n |) is 
the non-normalized cumulative signature whose Z-th component is 
(™)Si((/)) = (™) (si ((f>) + ■ ■ - + si ((/>)). So given the candidate signature 
s we also know the non-normalized candidate cumulative signature 
S and hence the corresponding candidate /-vector for C, with com- 
ponents fi = I = l,...,n. Clearly 1-Si = s ;+ iH hs„ 

by definition. The Kruskal-Katona theorem at this point provides a 
test to check whether such a vector is actually an /-vector, the test 
consists precisely of condition ([5]), as explained in Proposition [2] □ 
Sometimes an equivalent procedure might be handier, especially 
for small systems. Here it follows. Let N = nls £ N n . 

1. For each I = 1, . . . , n, sort in lexicographic order the subsets of 
{1, . . . , n} of cardinality I. 

2. Take the family Q l of the first (JVi H h Ni)/{n - l)U\ = 

(fi + • • • + subsets, with respect to the lexicographic 

order. 

3. Take the union U™ =1 f2 ! of all the f2 , I = 1, . . . , n, and extract 
the minimal family f2. 

4. The function 4>n is the structure function of a system X with 
n components and signature s. 

Now considering Proposition [TJ the same proof of theorem [2] also 
proves the following test. 



10 



Criterion. The family Q l+1 should contain all the supersets (of 
cardinality I + 1) of at least one element from Si'. If this is not the 
case, then the vector s cannot be the signature of a system since 
U^Sl is not a simplicial complex. 

This criterion is equivalent to Theorem [21 and the algorithm 
we presented is simply the Kruskal-Katona algorithm adjusted to 
work directly with the candidate non-normalized cumulative signa- 
ture as opposed to its "complementary" vector with components 
(™)(1 — Si((j>)), I = 1, . . . ,n. This is the reason why we sort strings 
lexicographically, because the collection C is a simplicial complex, 
as opposed to ti. So instead of taking, as in the original Kruskal- 
Katona algorithm, initial segments in each Ci according to reverse 
lexicographic order, we take final segments, i.e. initial segments ac- 
cording to the reverse ordering, which is the lexicographic order, in 
each Cli. 

We want to show that this second algorithm can be fairly fast in 
an explicit detailed example. In [T], we study two systems that are 
described by this vector. 

Example. Consider the vector (0,3/10,2/5,3/10,0). We pass 
easily to the non-normalized one (0, 36, 48, 36, 0) by multiplying by 
5!. 

Start with I = 1. We must take the first zero singletons. 

Take I = 2. We must take the first 36/12=3 subsets with two 
elements. These are {1,2}, {1,3}, {1,4}. 

Take / = 3. We must take the first 84/12 = 7 subsets with three 
elements. These are {1,2,3}, {1,2,4}, {1,2,5}, {1,3,4}, {1,3,5}, 
{1,4,5}, {2,3,4}. 

Take I = 4. We must take the first 120/84 = 5 subsets with four 
elements. These are {1,2,3,4}, {1,2,3,5}, {1,2,4,5}, {1,3,4,5}, 
{2,3,4,5}. 

Take I = 5. We must take the first 120/120=1 subsets with five 
elements. This is {1, 2, 3, 4, 5}. 

From all these subsets we must extract a minimal family. It is 
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not difficult to obtain fi = {{1, 2}, {1, 3}, {1, 4}, {2, 3, 4}}. 

This fully determines the system, and we can use the definition of 
minimal cut sets to determine the structure function <j>n an d verify 
that N(4>a) = (0, 36, 48, 36, 0). 

4 Conclusions and outlook 

We have introduced an algorithm, borrowed from the theory of sim- 
plicial complexes, in the field of system reliability that checks if a 
given probability vector can be a system signature, and in case con- 
structs a system with that signature. This completely characterizes 
the set of possible system signatures. In a second paper (PQ), we will 
show further results that follow from the analogy between system 
signatures and /-vectors of simplicial complexes. Namely, we will 
show that the only signature with first and last component both dif- 
ferent from zero is the uniform one; we will show that two systems 
with the same signature can be different (even up to permutation 
of components). We will also show that a signature vector cannot 
have an isolated zero component, and study the unimodal property 
of signatures. 

The bridge between probability in the theory of reliability and 
other fields where the Kruskal-Katona theorem has proven to be 
fruitful, opens some promising perspectives, as hopefully more than 
just the results of the current article and of PQ. We are investigating 
the possibility of a quantum theory of the signature, employing a q- 
deformed binomial representation of integers, g-simplicial categories, 
etc.. We are also exploring ways to extend the study to include 
system availability, as a second crucial quantity to evaluate in the 
context of RAMS (Reliability, Availability, Maintainability, Safety) 
problems. 
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A Simplicial complexes 



In this section we recall some notions in the theory of simplicial 
complexes. 

A simplicial complex K is a set of simplices such that any face 
of a simplex from K is also in K and that the intersection of any 
two simplices Ei, E2 £ A" is a face of both Ei and E2. A simplicial 
d-complcx is a simplicial complex where the largest dimension of 
any simplex in it is d. The /-vector of a simplicial d-complex is the 
vector (/o, fi, . . . , fd) whose i-th component is the number of (i — 1)- 
dimensional faces in the simplicial complex, and by convention /o = 1 
unless the complex is empty. The Kruskal-Katona theorem provides 
a full characterization of /-vectors of simplicial complexes. 
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